Skip to content

JetBrains (Rider, IntelliJ, ...)

The AlertaVuln plugin for JetBrains IDEs - Rider, IntelliJ IDEA, PyCharm, GoLand, WebStorm, and the rest of the family - shows REDYELLOWGREEN findings on the lines they affect, matched to your AlertaVuln project.

  • Dependency and code-scan findings on the lines they affect - a full-line colour wash in the finding’s severity tier, a gutter icon, and the reasoning on hover.
  • A Dash tool window that lists every finding as a card grouped by type; click a card to jump straight to the code (with a brief highlight so you can see where it landed).
  • A status-bar widget showing the RED / YELLOW / GREEN counts; click it to focus the Dash.

GREEN findings are hidden by default.

Run AlertaVuln: Sign in (command palette or the AlertaVuln action). Your browser opens to AlertaVuln; authenticate with your existing login (Entra, Google, or email) and the IDE is signed in over a secure callback - there is no key to copy or paste. The token is stored in the IDE’s PasswordSafe.

The plugin matches your open project to a connected repository in AlertaVuln by its git remote automatically; for monorepos or unusual remotes, set the project id in the plugin settings.

  • API host - defaults to https://alertavuln.com. Point it at a self-hosted or staging host with the ALERTAVULN_API_URL environment variable (read at IDE launch) or in the plugin settings. Unset, it stays on alertavuln.com.
  • Visuals, show green, and the refresh interval mirror the VS Code options.

The JetBrains plugin is a findings viewer today: sign-in, inline RYG findings, the Dash tool window, and jump-to-code. The one-click dependency fixes, the bring-your-own-AI remediation handoff, and the local-CLI scan + “Fixed locally” verification ship in the VS Code extension now and are on the roadmap for JetBrains.